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REPLY BRIEF (37 C.F.R. 41^1) 

This Reply Brief is subnaitted in response to the Examiner's Answer mailed on July 1 3, 2005. 

No uie believed to be required to file a Reply Brief. Any required petition for eortensiott of 
time fer filmg this bnef and fees therefore, are dealt with in the accompanying TRANSMHTAL 
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RESPONSE TO EXAMEVER^S REMARKS 

A. GROUND OF REJECTION (Claims 1-14, 2(W3 and 39-52) 

Claims 1-14, 20-33 and 39-52 remain rejected under 35 US.C. §102(b) as being 
anticipated by He (U.S. Patent No. 5,944,824), Claim 1 is reproduced below for the convenience 
of the Board: 

1 . A method in a data processing system for changing a plurality of target 
passwords in a single sign-on environment, camprising the steps of: 

in response to receiving a change instruction identifying a first single sign-on 
password, changing the first single sign-on password to create a second single sign- 
on password; 

retrieving a target password; and 

modifying the target password in a user selected manner to match the second 
single sign-on password to create a modified target password 

Appellants continue to submit that He does not disclose 'in response to receiving a change 
instruction identifying a first single sign-on password, changing the first single sign-on password 
to create a second single sign-on password" and ''modifying the target password in a user 
selected manner to match the second single sign-on password to create a modified target 
password" as recited in claim 1 ; and, therefore, does not anticipate claim h 

In the Examiner's Answer, the Examiner states the following in responding to 
Appellants' arguments; 



He further disclosed that for a user with SSO capability, one Present Password for the 
user was located in the Network Element 20 (See He CoL 7 Lines 64-65). He also 
disclosed that a second '"Present Password" was located in a record stored in a database 
13 in a security server 15 (See He Col. 10 Lines 38-44 and Line 66-Col 1 1 Line 2). 

Examiner*s Answer dated July 13, 2005, pages 8 and 9. 
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The Examiner then further states; 

The appellants argue that He did not disclose "in response to receiving a change 
instruction identifying a first single sign-on password^ changing the first single sign-on 
password to create a second single sign-on password". As can be seen, in Col. 1 3 of He, 
He disclosed sending a message identifying the "Present Password*' in the 
Network Element 20 to a ""secure terminal server" 24 (See He CoL 13 Lines 26-30), 
Although this message was not specifically called a ''change instructlon'\ the message 
resulted in the changing of passwords at the Network Element", as can be seen in Col. 13, 
lines 31-35. Col. 13» lines 31*-3S further show that upon receiving this message (or in 
response to the message) the "secure terminal server^" changed the Present Password 
(First SSO Password) in the Network Element 20 to the New Password (Second SSO 
Password) using the data provided in the message of CoL 13 Lines 27-28, 

Examiner's Answer dated July 13, 2005, page 9. 



Yet further, in response to Appellants arguments that **He clearly desc^bed that the super 
user identifier is not a single sign-on password", the Examiner responds as follows: 



The Section cited by the appellants to show this is Col. 1 1 Lines 3-11, wherein the 
examiner can find no teaching that He describes that the super user identifier is not a single 
sign-on password, but the examiner agrees that this may be the case because in general an 
identifier is not meant to be a password, but is usually associated with a password. 
However, He clearly disclosed that a Siq^er User had the SSO capability as recited in Col 8 
Lines 47-54, and fiirdier that the super user had a password, which was changed (See He 
CoL 13 Lines 31-35), 

Examiner's Answer dated July 13, 2005, page 10. 

Appellants respectfully disagree with the Examiner's assertions* He does not disclose or 
suggest that the '^Present Password" and the "New Password'* described therein is the same as a 
first single-sign-on (SSO) password and a second single-sign-on (SSO) password as alleged by the 
Examinee He only discloses changing a Network element (NE) password or a *'super user 
password'*, and these are not single sign^on passwords as was explained in detail in the Appeal 
Brief. 

Single-sign-on technology enables a user to access a plurality of separate resources by 
using a single password, and He is primarily directed to permitting a single-sign-on (SSO) of 
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users to a plurality of Network Elements. He does not discuss changing an SSO password, and 
particularly docs not relate to changing a first SSO password to a second SSO password in 
response to receiving a change instruction identifying the fir^t single-sign-on password. 

Appellants also disagree with the Examiner's assertion that He contains no teaching in Col. 
1 1, Lines 3-1 1 that the super user identifier is not a single sign-on password. In Col. 1 1, lines 3-11, 
He very clearly states that the **Super-User Log-On Identifier" 142 is different fix)m the one that 
is used by network security administrator 17 for interaction with the NE 20, He describes that a 
"super user*' requires the privileges to create regular user accounts, to set up initial user 
passwords, and to change user passwords in a Network Element (not to change a single-sign-on 
password). He further describes that the existence of this " separate super tiser identifier 142 
su pports the implementation of SSO". 

Thus, it should be clear that He does, in fact, clearly disclose, in Col. 1 1 lines 3-11, that 
the super user identifier is not an SSO pas^ord, but is used by a network security administrator 
to generally support the implementation of SSO. Col. 13» lines 3105, also referred to by the 
Examiner only discloses changmg a super user password, and does not at all discuss changing an 
SSO password 

B, GROUND OF REJECTION (Claims 16, 35 and 54) 

Claims 16, 35 and S4 remain rejected under 35 U.S.C. §1 03(a) as being vmpatentable over 
He in view of Prafiillchandra (U.S. Patent 5,734,718), 

As mentioned previoiisly, Frafullchandra merely discusses the inrportance of changing 
passwords at predetermined intervals. Neither He nor PrafUUchandra nor their combination 
disclose or suggest that "in response to a determination that a target password has been 
retrieved", "determining a change target password policy*', and "applying the change target 
password policy to modify the target password to match the second single sign-on password to 
create the modified target password" as recited in claim 16. Only the present application contains 
such disclosure, and one of ordinary skill in the art would not be motivated to combine the 
references as proposed by the Examiner in the absence of the teachings of the present 
application. 
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In view of the above. Appellants respectfiilly siibmits that claims 1-57 are allowable ovex 
the cited prior art and that the application is in condition for allowance. Accordingly, Appellants 
respectfully requests the Board of Patent Appeals and Interferences to not sustain the rejections 
set forth in the Final OfiSce Action and in the Examlncr*s Answer. 




Gerald H. Glanz: 
Reg, No, 25,035 
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